Lucene search

K
ubuntucveUbuntu.comUB:CVE-2022-42258
HistoryDec 30, 2022 - 12:00 a.m.

CVE-2022-42258

2022-12-3000:00:00
ubuntu.com
ubuntu.com
9
nvidia gpu display driver
linux
kernel mode
integer overflow
denial of service
data tampering
information disclosure

7.3 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

LOW

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H

0.0004 Low

EPSS

Percentile

5.1%

NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel
mode layer (nvidia.ko), where an integer overflow may lead to denial of
service, data tampering, or information disclosure.

Notes

Author Note
mdeslaur some binary drivers are no longer support by NVidia, so they are marked as ignored here

7.3 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

LOW

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H

0.0004 Low

EPSS

Percentile

5.1%